SSL Expiry Monitoring dashboard

Use the SSL Expiry Monitoring dashboard to view the details of SSL certificates used across your services, such as the count of certificates, expiry dates, and expiry events.

You can analyze this data and use it to make informed decisions about renewing the SSL certificates or procuring new certificates.

The method of SSL data retrieval depends on the version of PATROL Agent you are using:

  • For version 24.3 and later, the dashboard automatically retrieves the SSL certificate data from the Agent. 
  • For versions earlier than 24.3, contact BMC Support to run the script to retrieve data. 

Related topics

Configuring-dashboards-with-additional-customizations

Creating-and-customizing-dashboards

Sharing-and-embedding-dashboards

 

Example: View the summary SSL certificate expiration data

Jordan is a reporting tenant administrator at Apex Global. He wants to examine all the SSL certificates nearing their expiration dates and decide whether to procure new certificates or renew the existing ones.

To view the SSL Expiry Monitoring dashboard

  1. From the navigation image-2024-9-3_14-14-29.pngmenu, click Dashboards.
  2. Search for the Operations Management folder and select it.
  3. Click SSL Expiry Monitoring Dashboard.

The following image shows the SSL Expiry Monitoring dashboard with sample data:

SSL_bhd.png

 

Viewing data in the SSL Expiry Monitoring dashboard

To view data in the SSL Expiry Monitoring dashboard,  you must configure a Knowledge Module script to collect the SSL expiry details and install the script on the PATROL Agent.

To configure the script:

  1. Download the SSLCert sript from the attached folder.
    The following files are available in the folder:
    • ssl-certificate-monitor.sh: This is the main script file that runs to collect data.
    • ssl-certificate-monitor.sh.in: This is the input file that contains a list of endpoints to be checked and the export port number. The main script file uses the inputs from this file.
    • SSL Certificate Expiry Monitoring.doc: This document provides information about the script.
  2. On the PATROL Agent where you plan to install the script, make sure that the scripting solution is installed by verifying that the TRO directory exists in one of the following locations:
    • PATROL_HOME directory
    • lib/knowlege directory
  3. If the scripting solution is not installed on the PATROL Agent, perform the following steps:
    1. Go to BMC Helix Operations Management.
    2. Create a deployable package for the scripting solution. For information about creating a deployable package, see Configuring deployable packages.
  4. Install the script to your local directory. 
    We recommend you create a directory called scripts in the PATROL_HOME directory and install the SSL expiry details script in the scripts directory.

 

Panels in the SSL Expiry Monitoring dashboard

The following table describes the panels in the SSL Expiry Monitoring dashboard:

Panel

Description

Example

Monitored Sites/Applications

The number of applications or sites that use SSL certificates.

image-2024-9-3_10-48-38.png

Certificates Expiring: Next 30 Days

The number of SSL certificates that are due to expire in the next 30 days.

image-2024-9-3_10-54-59.png

Certificates Expiring: 1-6 Months

The number of SSL certificates that are due to expire in the next 1 to 6 months.

image-2024-9-3_10-56-24.png

Certificates Expiring: 6-12 Months

The number of SSL certificates that are due to expire in the next 6 to 12 months.

image-2024-9-3_11-1-53.png

SSL Certificate Expiry View

This section displays the details of the certificates and their expiration dates.

It is updated based on the dynamic panel you select to view. For example, the specific certificates are displayed if you click the Certificates Expiring: 1-6 Months panel. By default, all the Monitored Sites/Applications panel certificates are displayed.

image-2024-9-3_11-7-12.png

SSL Certificates Expiry Events

The SSL Certificate Expiry Events section provides the details of generated certificate events.

image-2024-9-3_11-6-15.png

 

To update the severity mappings for expiration data

You can edit the value mappings that are configured to display the severity of the expiration date. 

  1. Click the image-2024-9-3_14-26-21.pngicon on any panel and select Edit.
  2. Expand Value mappings and click Edit value mappings.
    image-2024-9-3_11-15-7.png
  3. On the Value mappings page, update the mapping based on your preference.
    image-2024-9-3_11-23-7.png
  4. Save the changes.

 

To update threshold values

You can configure a panel to display certificate thresholds as absolute or percent values.

  1. Click the image-2024-9-3_14-26-21.pngicon on any panel and select Edit.
  2. Expand Thresholds and click Add threshold.
    image-2024-9-3_11-24-19.png
    image-2024-9-3_11-16-7.png
  3. Update the threshold values based on your preference.
  4. Save the changes.

 

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*